For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

buulam's avatar
buulam
Icon for Admin rankAdmin
Dec 12, 2022

DevCentral Community Lab - A&O Toolchain - Deploying Applications with AS3 - December 13, 2022

Hi Everyone, We will use this thread for help with the lab. Lab Guide https://clouddocs.f5.com/training/community/automation/html/class03/class03.html Intro to the lab AubreyKingF5 and I wi...
buulam's avatar
buulam
Icon for Admin rankAdmin
Dec 13, 2022

Question was asked during the live stream on adding ASM policies to something like an Exchange FAST deployment. What you'll want to do is modify the template to create the policyWAF option in the AS3 declaration. Luckily - in the latter portion of the lab, you'll actually run through the exercise of doing so. It's not specific to ASM, though, so I might modify that bit of the lab to show an example either later today or tomorrow. Will post in here!

  • buulam's avatar
    buulam
    Icon for Admin rankAdmin
    Dec 14, 2022

    This adds a WAF policy parameter to the example FAST template

    title: Simple HTTP Application
description: Simple HTTP load balancer using the same port on client and server side.
parameters:
  tenant_name: tophttp
  application_name: defaultsHTTP_8080
  virtual_address: 10.0.0.200
  virtual_port: 8080
  server_addresses:
    - 10.1.20.10
    - 10.1.20.11
  service_port: 80
  waf_policy:
template: |
  {
    "class": "ADC",
    "schemaVersion": "3.20.0",
    "{{tenant_name}}": {
      "class": "Tenant",
      "{{application_name}}": {
        "class": "Application",
        "template": "http",
        "serviceMain": {
          "class": "Service_HTTP",
          "virtualAddresses": [
            "{{virtual_address}}"
          ],
          "virtualPort": {{virtual_port}},
          "pool": "{{application_name}}_Pool1",
          "policyWAF": {
            "bigip": {{waf_policy}},
          }
        },
        "{{application_name}}_Pool1": {
          "class": "Pool",
          "monitors": [
            "icmp"
          ],
          "members": [
            {
              "serverAddresses": {{server_addresses::array}},
              "servicePort": {{service_port}}
            }
          ]
        }
      }
    }
  }